CVE-2024-5273
Assigner: jenkins
Published: 2024-05-24T13:46:09.897Z
State: PUBLISHED
affected: vendor: Jenkins Project
product: Jenkins Report Info Plugin
versions: version: 0
versionType: maven
lessThanOrEqual: 1.2
status: affected
defaultStatus: unknown
descriptions: value: Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by editing the workspace path.